
DEPARTMENT OF DEFENSE 
UNITED STATES CYBER COMMAND 

9800 SAVAGE ROAD, SUITE 6171 
FORT GEORGE G. MEADE, MARYLAND 20755 


FEB 2 5 2019 


Michael Martclle 
The National Security Archive 
Gelman Library, Suite 70) 
2130 H Street, N.W. 
Washington, D.C. 20037 


Dear Mr. Martelle, 

Thank you for your September 21, 2018 Freedom of Information Act (FOIA) request for 
TASKORD 14-0061, “U.S. Cyber Command Operational Processes”. 

As the initial denial authority, 1 am partially denying portions of the document under 5 U.S.C. § 
552 (b)(3). The denied portions include defense critical infrastructure security information 
exempt from disclosure under 10 U.S.C. § 130e, and personally identifying information 
regarding personnel assigned to a sensitive unit exempt from disclosure under 10 U.S.C. § 130b. 
U.S. Cyber Command is a sensitive unit. 

If you are not satisfied with our action on this request, you may file an administrative appeal 
within 90 calendar days from the date of this letter by U.S. mail or email. If you submit your 
appeal in writing, please address it to ODCMO, Director of Oversight and Compliance, 4800 
Mark Center Drive, ATTN; DPCLTD, FOIA Appeals, Mailbox #24, Alexandria VA 22350- 
1700. If you submit your appeal by email please send it to OSD.FQl A-APPFAL@mail.mil . 

All correspondence should reference U.S. Cyber Command case tracking number 19-R018. 

Additionally, you may contact the Office of Government Information Services (OGIS), which 
provides mediation services to help resolve disputes between FOIA requesters and Federal 
agencies. Contact information is 8601 Adelphi Road - OGIS, College Park, MD 20740-6001. 
OGIS may also be reached at otiis@nara.uov . 202-741-5770, and 1-877-684-6448. 



Sincerely, 
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SUBJECT: UNITED STATES CYBER COMMAND (USCYBERCOM) TASKING ORDER 
(TASKORD) 14-0061 USCYBERCOM OPERATIONAL PROCESSES 

OPER/GLADIATOR SHIELD// 

MSGID/ORDE R/USCY BE ROOM/14-0061/USCYBE ROOM OPERATIONAL 
PROCESSES/TASKORD/(U//FOUO)// 

REF/A/EXORD/CYBERSPACE OPERATIONS COMMAND AND CONTROL (C2) FRAMEWORK 
/CJCS/212105ZJUN13/-// 

REF/B/DOC/CDR USCYBERCOM E-MAIL JOINT FORCE HEADQUARTERS CYBER 
(JFHQ-C) IOC FOC CRITERIA/USCYBERCOM/28 AUG 13/-// 

REF/C/DOC/DEPUTY COMMANDER USCYBERCOM MEMO IOC DESIGNATION OF 
JFHQ-C/USCYBERCOM/03 OCT 13// 

REF/D/DOC/DCOM USCYBERCOM MEMO IOC DESIGNATION OF JFHQ-C ATTACHMENT 1 
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- JFHQ-C CERTIFICATION/USCYBERCQM/03 OCT 13/// 

RE F/E/OPORD/OPE RATION GLADIATOR SHIELD/USCYBERCQM/23160GMAY 
11 / 11 - 002 // 

REF/F/DOC/DRAFT CYBER FORCE CONCEPT OF OPERATIONS AND EMPLOYMENT 
(CFCOE) VERSION 3.3/USCYBERCOM/20 NOV 13/-// 

REF/G/DOC/JOINT INFORMATION ENVIRONMENT (JIE) OPERATIONS CONCEPT OF 
OPERATIONS/USCYBERCOM/24 JAN 13/-// 

REF/H/DOC/CURRENT OPERATIONS STANDARD OPERATING PROCEDURE (SOP) - 
ATTACHMENT 2/USCYBERCOM/14 FEB 14/-// 


REF/I/DOC/DRAFT JOINT FORCE HEADQUARTERS DOD INFORMATION NETWORK 
(JFHQ-DODIN) CONCEPT OF OPERATIONS (CONORS) VERSION 48(S//REL TO USA, 
FVEY)/ USCYBERCOM/3 JAN 14/-// 

REF/J/PUB/CYBERSPACE OPERATIONS/JOINT PUBLICATION/S FEB 13/3-12// 
ORDTYP/TASKORD/USCYBERCOM// 

timeeone/z// 

NARR/(U//FOUG) THIS TASKORD DIRECTS THE CYBER MISSION FORCE (CMF), 
WHICH INCLUDES THE CYBER NATIONAL MISSION FORCE (CNMF), THE CYBER 
COMBAT MISSION FORCE (CCMF) , CYBER PROTECTION FORCE (CPF) , NATIONAL 
MISSION FORCE HEADQUARTERS (NMF-HQ) f JOINT FORCE HEADQUARTERS CYBER 
(JFHQ-C), AND THE PROPOSED JOINT FORCE HEADQUARTERS DEPARTMENT OF 
DEFENSE INFORMATION NETWORKS (JFHQ-DODIN) TO FOLLOW THE PHASED 
APPROACH OUTLINED IN THIS ORDER TO INTEGRATE WITH THE SEVEN 
USCYBERCOM OPERATIONAL PROCESSES, THIS ORDER ALSO PROVIDES INSIGHT 
INTO USCYBERCOM OPERATIONAL PROCESSES FOR THE CC/S/A/FA. 

GENTEXT/SITUATION/1. 

I.A. (U// FOUQ ) IN ACCORDANCE WITH (IAW) REFS, C AND D, IN ORDER TO 
EFFECTIVELY SYNCHRONIZE AND DECONFLICT THE CMF, AND TO FACILITATE 


JFHQ-C AND THE PROPOSED JFHQ-DODIN COMMAND AND CONTROL (C2) OF THEIR 
ASSIGNED FORCES, CDR USCYBERCOM INSTITUTED SEVEN PROCESSES TO 
FACILITATE OPERATIONS. THESE PROCESSES ARE THE CYBERSPACE TASKING 



JOINT TARGETING CYCLE, AND OPERATIONS SYNCHRONIZATION. 

1. B. (U//F0UO) THE PROCESSES IN THIS ORDER APPLY TO USCYBERCOM AND 
THE CMF. 

GENTEXT/MISSION/2. 

2. A. MISSION. (U//FOUO) UPON RECEIPT, USCYBERCOM AND THE CMF WILL 
PARTICIPATE IN, AND INTEGRATE WITH, THE SEVEN ESTABLISHED USCYBERCOM 
OPERATIONAL PROCESSES, 

GENTEXT/ EXECUTION/3. 
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3 , A. (U) CONCEPT OF OPERATIONS. 

3.A.I. (U//Fme) COMMANDER'S INTENT. TO REINFORCE THE USCYBERCOM 
OPERATIONAL PROCESSES ESTABLISHED TO SYNCHRONIZE r DECONFLICT, AND 
COORDINATE CMF ACTIONS IN CYBERSPACE, ADDITIONALLY, TO PROVIDE THE 
CC/S/A/FA VISIBILITY INTO USCYBERCOM PLANNING AND OPERATIONAL 
PROCESSES. 


3.A.I.A. (U//FW] PURPOSE. TO ESTABLISH THE FRAMEWORK TO 

OPERATIONALIZE THE CMF AND FAMILIARIZE THE CC/S/A/FA ABOUT USCYBERCOM 
PROCESSES. 


3 , A . 1. B . (U//F0U©J METHOD. UPON DECLARATION OF IOC/FOC, USCYBERCOM 

COMPONENTS AND ASSIGNED TEAMS WILL INTEGRATE WITH USCYBERCOM'S 
OPERATIONAL PROCESSES♦ JFHQ-C AND THE PROPOSED JFHQ-DODIN WILL 
COORDINATE OPERATIONAL SUPPORT THROUGH THEIR MISSION ALIGNED CCMD 
JOINT CYBER CENTERS (JCC)/CYBER SUPPORT ELEMENTS(CSES). 

3 . A . 1 . C . (U//FOUG) END STATE. THE CMF INTEGRATES WITH THE SEVEN 
USCYBERCOM OPERATIONAL PROCESSES IOT SYNCHRONIZE, DECONFLICT, AND 
COORDINATE ACTIONS IN CYBERSPACE. 


3.A.2. (U//F©ye) GENERAL. THE CMF INTEGRATION WITH USCYBERCOM 

OPERATIONAL PROCESSES IS CONDUCTED IN THREE PHASES: FAMILIARIZATION, 
TRANSITION, AND IMPLEMENTATION. IN PHASE I, FAMILIARIZATION, THE CMF 
IS DIRECTED TO BECOME FAMILIAR WITH USCYBERCOMS SEVEN OPERATIONAL 
PROCESSES * IN PHASE II, TRANSITION, THE CMF IS DIRECTED TO DEVELOP 
AND REFINE THEIR OPERATIONAL PROCESSES TO INTEGRATE WITH USCYBERCOM 
OPERATIONAL PROCESSES. THIS 

INCLUDES THE ABILITY TO SYNCHRONIZE, DECQN FLICT, AND C OORDINATE 
OPERATIONS AND MISSIONS VIA THE GLOBAL ITOl(3) 10 U S.C. § 13|lN PHASE III, 
IMPLEMENTATION, CYBERSPACE OPERATIONS ARE SYNCHRONIZED, DECONFLICTED, 
AND COORDINATED AT THE CMF-LEVEL, THEN GLOBALLY AT THE USCYBERCOM 
LEVEL. COMMAND AND CONTROL OCCURS PRIMARILY VTA THE INTEGRATED 
TASKING ORDER (ITOJ . THE CMF IS FULLY INTEGRATED WITH THE SEVEN 
USCYBERCOM OPERATIONAL PROCESSES. 


3.A.2.A. (U//FOU©) PHASE I, FAMILIARIZATION. THE INTENT OF PHASE 1 
IS TO ENSURE THE CMF IS CAPABLE OF EXECUTING THE TASKS, FUNCTIONS, 
AND PROCESSES DETAILED IN REF, F, THIS PHASE CONSISTS OF THREE 
OBJECTIVES, 


3. A. 2. A. 1. (U//FGy@) PHASE I, OBJECTIVE 1. THE CMF UNDERSTANDS THE 

SEVEN USCYBERCOM OPERATIONAL PROCESSES AS IDENTIFIED IN REF. D. 

3.A,2.A.2. (U//FOUG} PHASE I, OBJECTIVE 2. THE CMF ACQUIRES THE 
ACCOUNTS AND ACCESSES REQUIRED TO PARTICIPATE IN, AND INTEGRATE WITH, 
THE USCYBERCOM OPERATIONAL PROCESSES. 

3.A.2.A.3. (U//F0U0) PHASE I, OBJECTIVE 3. THE CMF ATTENDS OR 

DEVELOPS THE MINIMUM TRAINING REQUIRED TO PARTICIPATE IN, AND 
INTEGRATE WITH, THE USCYBERCOM OPERATIONAL PROCESSES. 

3. A. 2. A, 4. (U//FOTO) PHASE I, END STATE, THE CMF HAS THE ACCESSES, 
ACCOUNTS, AND REQUIRED TRAINING TO PARTICIPATE IN, AND INTEGRATE 
WITH, THE USCYBERCOM OPERATIONAL PROCESSES AS IDENTIFIED IN REF. D. 


i \c I xsmi M I) I m Hi 1 | t | \ l 1 M UVt X 









I \< I \SMI II I) i t m nm< t M t ^ n\ | > 


3.A.2.B. (U//FeU9} PHASE II, TRANSITION. THE INTENT OF PHASE It IS 

TO DIRECT THE CMF TO CONTINUE TO DEVELOP, REFINE, AND UTILIZE 
OPERATIONAL PROCESSES TO SYNCHRONIZE, DECONFLICT, AND COORDINATE 
CYBERSPACE ACTIONS IN THEIR DESIGNATED MISSION AREAS AND INTEGRATE 
WITH ESTABLISHED USCYBERCOM OPERATIONAL PROCESSES TO SYNCHRONIZE, 
DECONFLICT, AND COORDINATE CYBERSPACE ACTIONS GLOBALLY, THIS PHASE 
CONSISTS OF TWO OBJECTIVES, 


3 , A . 2 . B, 1 . (U//FOU9) PHASE II, OBJECTIVE 1. THE CMF DEVELOPS OR 

REFINES THEIR OPERATIONAL PROCEDURES TO SYNCHRONIZE, DECONFLICT, AND 
COORDINATE CYBERSPACE ACTIONS IN THEIR DESIGNATED MISSION AREAS. 


3.A.2.B.2. (U//FW9) PHASE II, OBJECTIVE 2, THE CMF PARTICIPATES IN, 

AND INTEGRATES WITH, ESTABLISHED USCYBERCOM OPERATIONAL PROCESSES TO 
SYNCHRONIZE, DECONFLICT, AND COORDINATE CY BER S PACE ACTIONS « THIS 
INCLUDES, BUT IS NOT LIMITED TO, UTILIZING 
(b)(3) 10 U S.C. §130^| - 


(b)(3) tOU.S.C.§ 130e 


3 . A . 2 ♦ B . 3 . (U//F©W) PHASE II, END STATE * OPERATIONAL PROCESSES ARE 

DEVELOPED, REFINED, AND UTILIZED TO SYNCHRONIZE, DECONFLICT, AND 
COORDINATE CYBERSPACE ACTIONS BETWEEN USCYBERCOM AND THE CMF. 


3.A.2.C. (U//FGUO) PHASE III, IMPLEMENTATION . INTENT OF PHASE III IS 
TO ENSURE CYBERSPACE ACTIONS ARE SYNCHRONIZED, DECONFLICTED, AND 
COORDINATED BETWEEN USCYBERCOM AND THE CMF THOUGH INTEGRATION WITH, 
AND UTILIZATION OF, USCYBERCOM OPERATIONAL PROCESSES IAW REF, C AND 
D, AND H. ADDITIONALLY, THE CC/S/A/FA UNDERSTAND THE USCYBERCOM 
OPERATIONAL PROCESSES* THIS PHASE CONSISTS OF THREE OBJECTIVES. 


3.A.2.C.I. (U//F0y©) PHASE III, OBJECTIVE 1, THE CMF DEMONSTRATES THE 
ABILITY TO SYNCHRONIZE, DECONFLICT, AND COORDINATE CYBERSPACE ACTIONS 
WITHIN THEIR DESIGNATED MISSION AREAS, 


3 , A.2.C.2 . (U//F0U0) PHASE III, OBJECTIVE 2. THE CMF AND USCYBERCOM 

DEMONSTRATE THE ABILITY TO DECONFLICT, SYNCHRONIZE, AND COORDINATE 
CYBERSPACE ACTIONS UTILIZING THE SEVEN USCYBERCOM OPERATIONAL 
PROCESSES AS LISTED IN REF. D. 


3.A.2.C.3, (U//F0UG) PHASE III, OBJECTIVE 3. CC/S/A/FA HAS INSIGHT 

INTO THE SEVEN USCYBERCOM OPERATIONAL PROCESSES * 

3. A , 2.C.4♦ (U//F©ue) PHASE III, END STATE: OPERATIONAL PROCESSES ARE 

REAFFIRMED TO ENSURE USCYBERCOM AND CMF ACTIONS IN CYBERSPACE ARE 
SYNCHRONIZED, DECONFLICTED AND COORDINATED. 

3.8. (U) TASKS. 


3.B.1.<U> CMF HQS. 


3.B.1.A.(U//FOU9) PER USCYBERCOM CURRENT OPS SOP, ANNEX G (REF. H), 


DESIGNATE PERSONNEL TO ESTABLISH ACCOUNTS FOR UTILIZATION 3) 10 U.S.C. § 1 
BASED ON MISSION REQUIREMENTS. 


3.B.1 .A. 1 .(U//FO m) DESIGNATE AND IDENTIFY PERSONNEL TO BE CERTIFIED 
AS ^){3) 10 U.S.C. § 13oj- PROVIDE IDENTIFIED PERSONNEL TO POC IN PARAGRAPH 
S.C7T. 
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3.B.I .A.2.(U// EQ«G ) DESIGNAT E AND IDENTIFY PERSONNEL TO BE CERTIFIED 


AS 


(b)(3) 10 USC § 13Qe 


.THESE PERSONNEL WILL BE RESPONSIBLE FOR 


VETTING JFHQ PERSONNEL FOR THE APPROPRIATE SYSTEM ROLES AND PROVIDING 
THEM WITH THAT ACCESS. PROVIDE IDENTIFIED PERSONNEL TO POC IN 
PARAGRAPH 5.C.3. 


3 . B . 1 . A . 3 . (U//FOUO) ALL PERSONNEL IDENTIFIED IAW WITH PARA 

3.B.1.A.2.WILL BE REQUIRED TO ATTEND THE USCYBERCOM LED 
COURSE PRIOR TO BEING PROVIDED ELEVATED LEVELS OF 

SYSTEM ACCESS. 

3 . B . 1 . B . (U//FOU9) IDENTIFY TRAINING REQUIREMENTS OR SHORTFALLS 

HINDERING COMPLIANCE WITH THIS ORDER TO USCYBERCOM J337, READINESS, 
EXERCISES AND TRAINING BRANCH. SIPR EMAIL: 

USCC_J370CYBERCOM.SMIL.MIL. TS EMAIL: USCC_J370NSA,IC■GOV. 

3.B.1.C.(U//F9«9) NLT 17 MARCH 14, BEGIN INTEGRATION OF USCYBERCOM 
OPERATIONAL PROCESSES AND PARTICIPATE IN USCYBERCOM B2C2WG EVENTS 
(REF. H) . 


3. B . 1 . A .1 , AND 
bpiou.s.c § 1306 


3.B.2.<U) USCYBERCOM. 


3.B.2.A. (U//FOUQ) DEFINE AND ESTABLISH A REQUEST FOR SUPPORT (RFS) 
AND REQUEST FOR FORCES (RFF) PROCESS TO BE EXECUTED INDEPENDENT OF 
THE CERF PROCESS. 

3.B.2.B.(U//F0UG) COORDINATE WITH THE CMF TO IDENTIFY GAPS IN 
EXISTING TRAINING OPPORTUNITIES TO FACILITA TE THIS ORDER, SCHEDULE, 
AT A MINIMUM, | (b)(3) 10 U SC. § 130e | RER MONTH. 


3,C♦ (U) COORDINATING INSTRUCTIONS. 


3 . C . 1 . 


(U//FOUG) ALL PROSPECTIVE (3) 10 U S C § 1 j MUST HAVE AN INTEL INK 


SIPRNET AND JWICS PASSPORT ACCOUNT TO REQUEST ACCESS FROM j 10 U S C. § 
1(b)(3) 10U.S.C § 130e * 


3.C.1.A, (U//FGUQ) INTELINK SIPRNET PASSPORT ACCOUNT REQUESTS ARE 
AVAILABLE AT THIS LINK: 

HTTPS://PASSPORT.CSP. SGOV.GOV/PASSPORT/WELCOME . 


3.C.I.B. (U//F9W) INTELINK JWICS PASSPORT ACCOUNT REQUESTS ARE 

AVAILABLE AT THIS LINK: https://PASSPORT.CSP.1C.GOV/PASSPORT/WELCOME 


3.C.I.C. (U//F0U©) SIPRNET ))(3) 10 U.S.C. § 130 REQUESTS ARE AVAILABLE AT 

THIS LINK: HTTP://INTELSHARE. INTE LINK SGOV. GOV /SITES j{b)(3) 10 U $.C. § laOe^ L 


OGIN.ASPX 


3.C.I.D. (U//F0U©) TS ))(3) IQ U.S.C. § 130 REQUESTS ARE AVAILABLE AT THIS 

LINK (WHEN PROMPTED REQUEST ACCESS): 

HTTPS://SECUREINTELSHARE.INTELINK.IC.GOV/SITES/CYBERWAR/DEFAULT.ASPX 


(U//FOUO)j[ 3) IQ U S C § I^GUIDE , TRAINING COURSE SCHEDULES AND 


3 . C . 2 . 

TRAINING MATERIAL ARE AVAILABLE ON THE SIFNET 3) 10 U.S.C. § 1 UNDER THE 
TRAINING LINK (UNDER THE TRAINING MENU): 

HTTPS://SECUREINTELSHARE.INTELINK.IC.GOV/SITES/CYBERWAR/DEFAULT.ASPX. 
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3.C.3. (U//F0y©) ALL ADDRESSEES WILL ACKNOWLEDGE RECEIPT OF THIS 

ORDER WITHIN 48 HOURS OF RECEIPT AND REPORT COMPLIANCE AND PROGRESS 
WITH THE OBJECTIVES LISTED IN THIS ORDER EVERY FRIDAY BY 2OO0Z UNTIL 
COMPLETION WITH PHASE III AT: 

HTTP://INTELSHARE,INTELINK.SGOV.GOV/SITES/USCYBERCOM/JOC/ORDERS/SITEP 
AGES/HOME.ASPX .// 

GENTEXT/ADMINISTRATION AND LOGISTICS/4. 


4 . A. (U//F©U0) USCYBERCOM WILL NOT PROVIDE FUNDING FOR THE TASKS 
OUTLINED WITHIN THIS ORDER.// 

GENTEXT/COMMAND AND CONTROL/5. 


5.A.(U//FOU9) USCYBERCOM IS THE SUPPORTED COMMAND FOR THIS ORDER f ALL 
OTHERS ARE SUPPORTING. 


5.B.(U//F0UO) CMF HQ WILL UTILIZE 
5.C.(U//F0U9) POINTS OF CONTACT. 


(b)(3) 10 U S.C. § 13Qe 


CMF TEAMS. 


5.C.I.(U//FOU0) FOR ACKNOWLEDGEMENT, COMPLIANCE, AND ASSESSMENT 
QUESTIONS/ISSUES CONTACT USCYBERCOM J331 CURRENT ACTIONS BRANCH. SIPR 
EMAIL: USCC_J33_CAB5CYBERCOM.SMIL.MIL; TS EMAIL: 

USCC_J3 3_CAB@NSA,IC♦GOV. 

5.C.2.(U//FOU0) FOR OPERATIONAL QUESTIONS/ISSUES CONTACT USCYBERCOM 
J332 CURRENT OPERATIONS BRANCH, SIPR EMAIL: 

USCC_J33_COB0CYBERCOM.SMIL.MIL; TS EMAIL: USCC_J33_COB0NSA.IC.GOV, 

5.C.3.(U//FGUG) FOR TRAINING QUESTIONS/ISSUES CONTACT USCYBERCOM 
J337, READINESS, EXERCISES AND TRAINING BRANCH. SIPR EMAIL: 
USCC_J370CYBERCOM.SMIL.MIL. TS EMAIL: USCC_J37@NSA.IC.GOV. 

5.C.4.(U//F0UG) FOR AFTER HOURS OR 24/7 SUPPORT, QUESTIONS/ISSUES 
CONTACT USCYBERCOM J333 JOC, JOINT DUTY OFFICER <JDO). SIPR EMAIL: 
JOCOPS0CYBERC OM.SMIL.MIL. TS EMAIL: JOCOPS0NSA.IC.GOV, UNCLASS VOICE: 
i)(3) 10 US.C. § 13(j + SECURE VOICE: 969-1645. 


GENTE XT/AUTHENTICATION/FOR THE CDR, 

(b)(3) 10 U.S.C. § 130b 

(b)(3) 10U S.C. § 130b 

If 


AKNLDG/YES// 

++++ 

M/R: //UNCLAS // 

DRAFT: USCYBERCOM JOC Duty Officer, FICD, 966-8730 
REL: USCYBERCOM JOC Duty Officer, F1CD, 966-B730 
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